City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.52.12.21 | attack | Sep 27 02:13:02 *hidden* sshd[21341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 Sep 27 02:13:04 *hidden* sshd[21341]: Failed password for invalid user upgrade from 106.52.12.21 port 33434 ssh2 Sep 27 02:18:14 *hidden* sshd[22474]: Invalid user student5 from 106.52.12.21 port 59164 |
2020-09-28 07:50:05 |
| 106.52.12.21 | attackbotsspam | Sep 27 12:17:53 server sshd[5811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 Sep 27 12:17:54 server sshd[5811]: Failed password for invalid user shubham from 106.52.12.21 port 49694 ssh2 Sep 27 12:28:24 server sshd[6253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 Sep 27 12:28:26 server sshd[6253]: Failed password for invalid user wordpress from 106.52.12.21 port 41400 ssh2 |
2020-09-28 00:24:12 |
| 106.52.12.21 | attackspam | 3x Failed Password |
2020-09-27 16:25:01 |
| 106.52.12.21 | attackspam | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): |
2020-09-25 04:45:45 |
| 106.52.12.21 | attackspambots | Sep 21 16:14:33 ovpn sshd\[21360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 user=root Sep 21 16:14:35 ovpn sshd\[21360\]: Failed password for root from 106.52.12.21 port 47440 ssh2 Sep 21 16:22:54 ovpn sshd\[14488\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 user=root Sep 21 16:22:55 ovpn sshd\[14488\]: Failed password for root from 106.52.12.21 port 38568 ssh2 Sep 21 16:25:14 ovpn sshd\[16084\]: Invalid user steam from 106.52.12.21 Sep 21 16:25:14 ovpn sshd\[16084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 |
2020-09-22 01:47:42 |
| 106.52.12.21 | attackspam | 2020-09-20T22:06:32.240014abusebot-4.cloudsearch.cf sshd[24488]: Invalid user proxyuser from 106.52.12.21 port 41216 2020-09-20T22:06:32.247044abusebot-4.cloudsearch.cf sshd[24488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 2020-09-20T22:06:32.240014abusebot-4.cloudsearch.cf sshd[24488]: Invalid user proxyuser from 106.52.12.21 port 41216 2020-09-20T22:06:34.080386abusebot-4.cloudsearch.cf sshd[24488]: Failed password for invalid user proxyuser from 106.52.12.21 port 41216 ssh2 2020-09-20T22:12:22.335684abusebot-4.cloudsearch.cf sshd[24598]: Invalid user guest3 from 106.52.12.21 port 46580 2020-09-20T22:12:22.343479abusebot-4.cloudsearch.cf sshd[24598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 2020-09-20T22:12:22.335684abusebot-4.cloudsearch.cf sshd[24598]: Invalid user guest3 from 106.52.12.21 port 46580 2020-09-20T22:12:23.895390abusebot-4.cloudsearch.cf sshd[24598]: ... |
2020-09-21 17:31:25 |
| 106.52.12.21 | attackspam | SSH Brute Force |
2020-09-12 21:24:56 |
| 106.52.12.21 | attackbotsspam | SSH brute force |
2020-09-12 13:26:51 |
| 106.52.12.21 | attackspam | Sep 11 18:50:31 sshgateway sshd\[26820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 user=root Sep 11 18:50:33 sshgateway sshd\[26820\]: Failed password for root from 106.52.12.21 port 39682 ssh2 Sep 11 18:57:51 sshgateway sshd\[27879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 user=root |
2020-09-12 05:15:16 |
| 106.52.121.226 | attackbots | $f2bV_matches |
2020-08-26 03:50:47 |
| 106.52.12.21 | attackbots | 2020-08-20T07:25:25.015944lavrinenko.info sshd[22372]: Invalid user zhangxd from 106.52.12.21 port 35692 2020-08-20T07:25:25.023413lavrinenko.info sshd[22372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 2020-08-20T07:25:25.015944lavrinenko.info sshd[22372]: Invalid user zhangxd from 106.52.12.21 port 35692 2020-08-20T07:25:27.152195lavrinenko.info sshd[22372]: Failed password for invalid user zhangxd from 106.52.12.21 port 35692 ssh2 2020-08-20T07:27:29.184867lavrinenko.info sshd[22520]: Invalid user joana from 106.52.12.21 port 57232 ... |
2020-08-20 12:38:09 |
| 106.52.12.21 | attack | Aug 10 04:52:12 mout sshd[5143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 user=root Aug 10 04:52:14 mout sshd[5143]: Failed password for root from 106.52.12.21 port 52518 ssh2 |
2020-08-10 12:31:39 |
| 106.52.12.21 | attack | [ssh] SSH attack |
2020-07-28 03:51:19 |
| 106.52.12.21 | attackbotsspam | Jul 22 18:04:23 abendstille sshd\[28046\]: Invalid user lyt from 106.52.12.21 Jul 22 18:04:23 abendstille sshd\[28046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 Jul 22 18:04:26 abendstille sshd\[28046\]: Failed password for invalid user lyt from 106.52.12.21 port 48954 ssh2 Jul 22 18:09:12 abendstille sshd\[300\]: Invalid user saitoh from 106.52.12.21 Jul 22 18:09:12 abendstille sshd\[300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 ... |
2020-07-23 00:20:39 |
| 106.52.121.148 | attackspambots | Jul 12 09:22:45 DAAP sshd[4531]: Invalid user anda from 106.52.121.148 port 38736 Jul 12 09:22:45 DAAP sshd[4531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.121.148 Jul 12 09:22:45 DAAP sshd[4531]: Invalid user anda from 106.52.121.148 port 38736 Jul 12 09:22:47 DAAP sshd[4531]: Failed password for invalid user anda from 106.52.121.148 port 38736 ssh2 Jul 12 09:26:18 DAAP sshd[4548]: Invalid user trash from 106.52.121.148 port 46096 ... |
2020-07-12 17:40:01 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.12.165
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13253
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;106.52.12.165. IN A
;; AUTHORITY SECTION:
. 316 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 10:51:01 CST 2022
;; MSG SIZE rcvd: 106Host 165.12.52.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 165.12.52.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 116.255.174.49 | attackspambots | Unauthorized connection attempt detected from IP address 116.255.174.49 to port 80 [T] |
2020-01-09 04:37:50 |
| 124.115.214.182 | attackspambots | Unauthorized connection attempt detected from IP address 124.115.214.182 to port 1433 [T] |
2020-01-09 04:14:19 |
| 58.242.100.66 | attack | Unauthorized connection attempt detected from IP address 58.242.100.66 to port 1433 [T] |
2020-01-09 04:23:07 |
| 153.201.3.98 | attack | Unauthorized connection attempt detected from IP address 153.201.3.98 to port 23 [T] |
2020-01-09 04:11:46 |
| 222.186.31.83 | attack | SSH Brute Force, server-1 sshd[9183]: Failed password for root from 222.186.31.83 port 40726 ssh2 |
2020-01-09 04:02:52 |
| 218.89.30.223 | attackspam | Unauthorized connection attempt detected from IP address 218.89.30.223 to port 1433 [T] |
2020-01-09 04:06:50 |
| 223.155.87.164 | attackspam | Unauthorized connection attempt detected from IP address 223.155.87.164 to port 8080 [T] |
2020-01-09 04:01:30 |
| 123.207.241.148 | attack | IP: 123.207.241.148
Ports affected
World Wide Web HTTP (80)
Abuse Confidence rating 28%
Found in DNSBL('s)
ASN Details
AS45090 Shenzhen Tencent Computer Systems Company Limited
China (CN)
CIDR 123.206.0.0/15
Log Date: 8/01/2020 1:04:44 PM UTC |
2020-01-09 04:35:33 |
| 122.228.19.79 | attackbots | Jan 8 20:47:17 debian-2gb-nbg1-2 kernel: \[772152.115678\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=122.228.19.79 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=111 ID=19665 PROTO=TCP SPT=46083 DPT=990 WINDOW=29200 RES=0x00 SYN URGP=0 |
2020-01-09 04:15:08 |
| 35.199.51.122 | attack | Unauthorized connection attempt detected from IP address 35.199.51.122 to port 80 [T] |
2020-01-09 04:26:12 |
| 222.79.8.25 | attackbotsspam | Unauthorized connection attempt detected from IP address 222.79.8.25 to port 1433 [T] |
2020-01-09 04:04:44 |
| 167.114.135.58 | attackbotsspam | Unauthorized connection attempt detected from IP address 167.114.135.58 to port 3389 |
2020-01-09 04:33:17 |
| 121.14.2.50 | attackspam | Unauthorized connection attempt detected from IP address 121.14.2.50 to port 1433 [T] |
2020-01-09 04:15:38 |
| 221.232.182.69 | attack | Unauthorized connection attempt detected from IP address 221.232.182.69 to port 2323 [T] |
2020-01-09 04:28:30 |
| 120.31.132.35 | attackspambots | Unauthorized connection attempt detected from IP address 120.31.132.35 to port 1433 [T] |
2020-01-09 04:17:06 |